Method and apparatus for detecting and defending against CC attack
a technology of challenge collapsar and detection method, applied in the field of communication, can solve the problems of target server b>11/b> not being able to respond to requests of normal users, network security problems becoming more and more important, and reducing the false rate, so as to achieve the effect of short lagging time and low false ra
Active Publication Date: 2014-09-23
SANGFOR TECH INC
View PDF12 Cites 4 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Benefits of technology
The present patent aims to provide a method and apparatus for detecting and defending against a rate-based attack on HTTP requests (CC attack). The method makes use of correlations between HTTP requests to accurately detect and mitigate the attack. It is efficient, quick, and has a low false rate, identifying and defending against CC attacks in a timely and accurate manner.
Problems solved by technology
Accompanied with continuous development of the Internet technologies, the network security problem becomes more and more important.
This will exhaust the system resources of the target server 11 and make the target server 11 unable to respond to requests of normal users.
Currently, there are only a few methods available for detecting and defending against CC attacks, and most of the methods suffer from a long lagging time and a high false rate.
For example, a scheme that detects whether a server is subjected to a CC attack according to changes in a ratio of request messages to response messages just suffers from a long lagging time because the system may have already been attacked for a period of time when a significant change in the ratio of request messages to response messages is found.
Furthermore, this method tends to determine a normal peak-hour access as an abnormal CC attack, so the false rate is high.
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0047]It shall be understood that, the embodiments described herein are only intended to illustrate but not to limit the present disclosure.
[0048]Referring to FIG. 2, an embodiment of a method for detecting and defending against a CC attack is disclosed, which comprises the following steps of:
[0049]step S101: determining whether a user's request of accessing a webpage is a dynamic webpage request;
[0050]step S102: recording the number of times m of requests for the webpage and the number of times n of related requests for the webpage within a preset time interval if the user's request of accessing the webpage is a dynamic webpage request;
[0051]step S103: determining that the webpage is subjected to a CC attack if a value (m−n) / m is greater than or equal to a preset threshold; and
[0052]step S104: redirecting the user's request of accessing the webpage.
[0053]This embodiment provides a novel method for detecting and defending against a CC attack. When a normal user accesses a webpage vi...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
A method for detecting and defending against a CC attack is disclosed, which comprises the following steps of: recording the number of times m of requests for a webpage and the number of times n of related requests for the webpage within a preset time interval if a user's request of accessing the webpage is a dynamic webpage request; and determining that the webpage is subjected to a CC attack if a value (m−n) / m is greater than or equal to a preset threshold. A corresponding apparatus is further disclosed. The method and the apparatus for detecting and defending against a CC attack of the present disclosure can accurately detect and defend against the CC attack.
Description
BACKGROUND[0001]1. Technical Field[0002]The present disclosure relates to the field of communications, and more particularly, to a method and an apparatus for detecting and defending against a Challenge Collapsar (CC) attack.[0003]2. Description of Related Art[0004]Accompanied with continuous development of the Internet technologies, the network security problem becomes more and more important. As one of the most commonly used means for network attacks, Distributed Denial of Service (DDoS) attacks have developed at a pace faster than the defense technologies in recent years. As the annual security report made by Arbor Networks Corporation in 2010 indicates, the traffic of DDoS attacks are increasing geometrically in recent years and have increased from 50 Gbps in 2009 to 100 GPs in 2010. Many international important events occurring in 2010 and 2011 can be attributed to DDoS attacks.[0005]As a kind of DDoS attacks, Challenge Collapsar (CC) attacks mainly attack webpages. A CC attack...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & AuthorityPatents(United States)
IPC IPC(8): G06F11/00G06F21/55H04L29/06H04L29/08
CPCG06F21/55H04L63/1458H04L67/02H04L69/28H04L67/22H04L67/535
InventorLIN, GUOQIANG
OwnerSANGFOR TECH INC